Last week I told you about how PassEv will ensure confidentiality by using a shared session key. Today I'm going to talk about how the program will encrypt the local file containing our passwords, or the PassStore, as I'll call it from now on.
A suitable algorithm to encrypt the data should combine some features: it has to be impossible to crack in a decent time and has to be quick enough to be used so the user hasn't got to wait 15 minutes till the encryption is done. After studying "modern" algorithms, I have decided to use AES, which is a small, fast, hard to crack encryption standard and is suitable
for a wide range of devices or applications. It has been determined as
the best compromise between a combination of security, performance, efficiency,
ease of implementation and flexibility.
128 bit AES offers a total of 3.4 x 10^38 individual keys. It is estimated
that if an AES key generator were able to discover 1 AES key per second,
it would take 149 thousand-billion (149 trillion) years to crack a single
128 bit AES key.Currently, the technology is not available.
Passev is planned to be released the 1st of July. Stay tunned if you want to betatest it!